Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa
File:                     nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa (raw, json)
Hash identifier:          k+SK+iFUjD8k3G8uFqdLPMVQgq2VY/v5iPwBM07SwqU=
Subject key identifier:   9C:7F:A6:2D:AD:67:AA:D1:7B:36:E5:A2:FC:0C:5A:68:9E:EB:AE:91
Certificate issuer:       /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial:       019426D9585243520DFE049320ADBFBE53E0
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa
Signing time:             Thu 02 Jan 2025 11:49:25 +0000
ROA not before:           Thu 02 Jan 2025 11:49:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214270
IP address blocks:        89.33.128.0/24 maxlen: 24
                          2a01:fb80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:58:52:43:52:0d:fe:04:93:20:ad:bf:be:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
        Validity
            Not Before: Jan  2 11:49:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c7fa62dad67aad17b36e5a2fc0c5a689eebae91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:de:b1:7f:93:cc:58:d5:84:70:de:a6:81:8c:
                    74:b2:a1:d8:ce:b9:f2:27:31:2e:a3:10:e2:72:aa:
                    b3:d3:5f:1b:d2:a3:5e:4b:c9:01:0c:9e:85:05:70:
                    3c:a4:4f:ca:40:2b:0e:30:12:b1:86:88:95:60:46:
                    15:e1:29:23:3c:03:91:f4:b8:22:4d:95:46:6a:e5:
                    d0:d7:e4:cc:24:31:8c:b7:a5:5c:aa:b5:d3:29:71:
                    ea:26:8f:8c:30:1f:cb:3e:87:8e:22:a5:76:0a:7a:
                    16:57:61:6f:50:70:6d:da:b5:9f:df:dc:ac:9d:1c:
                    bc:93:79:32:70:c9:e2:ce:a8:ff:e6:e7:2e:8d:76:
                    d7:97:0b:a0:fb:bf:7c:85:b2:c6:e9:6d:7e:40:9c:
                    05:9c:d0:e0:c8:a2:0c:67:70:3d:7b:ac:57:ef:d2:
                    69:2b:7d:1a:0f:95:da:11:05:e8:b4:d0:38:fe:76:
                    75:24:f0:06:44:06:59:b8:83:43:f6:5f:01:a8:d6:
                    31:cc:73:0d:a1:d9:84:9f:c7:4c:b9:a8:94:20:59:
                    1b:40:22:3b:c7:dc:e4:cf:0d:06:ff:f9:e2:ad:37:
                    83:c7:ee:fb:2b:a3:d1:43:87:16:07:df:00:33:4f:
                    91:89:f9:03:41:36:15:20:1a:a5:a4:3d:16:d1:62:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7F:A6:2D:AD:67:AA:D1:7B:36:E5:A2:FC:0C:5A:68:9E:EB:AE:91
            X509v3 Authority Key Identifier:
                keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.33.128.0/24
                IPv6:
                  2a01:fb80::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:df:a9:ee:69:d4:90:fa:a6:6e:84:d2:cf:78:00:e6:32:b0:
         e0:04:1d:ab:c2:b9:b6:7b:c0:b8:47:67:e8:31:43:4b:f8:6b:
         76:aa:18:5c:e7:d8:e9:47:8b:f9:27:a6:88:86:35:b2:89:4e:
         9d:71:07:e3:8a:fd:c6:11:90:e3:f1:70:2a:fd:47:e3:53:ea:
         19:2d:ca:4c:d0:24:64:3f:c5:33:b7:57:46:d9:50:86:f8:f2:
         38:0f:0a:3d:d0:6a:ce:74:20:59:7d:6f:5a:a3:b7:9c:33:c1:
         55:e2:8c:57:ab:0f:97:c3:6a:7a:f4:74:a6:e5:15:b1:20:c0:
         9b:71:da:78:ac:12:43:65:d7:38:fa:46:02:60:b5:88:74:a0:
         34:c0:8f:cc:38:6d:7e:4e:c2:01:2e:98:8d:bf:42:12:9a:4a:
         b6:3e:7f:cf:b7:fb:97:d1:11:7d:b1:ab:d7:8b:5f:79:06:b5:
         d5:94:b5:18:cd:bc:81:3a:18:41:a3:bd:9d:dd:61:3d:11:09:
         41:7d:8f:42:41:70:cd:22:33:33:bd:c9:61:ce:d7:91:b2:53:
         d4:68:89:1e:df:e5:16:b8:71:a5:8c:2a:27:10:80:ea:e0:28:
         4f:8a:6f:30:70:78:23:fd:62:47:29:6a:af:ab:98:da:9c:a4:
         52:63:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----